Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48e7fe45-ec98-38d5-a1a1-92e1f609f4ae.roa
File:                     48e7fe45-ec98-38d5-a1a1-92e1f609f4ae.roa (raw, json)
Hash identifier:          rzN1lQ7GEAuk4OEaBbBqpzDIP9Emdghk7X397eZVN6M=
Subject key identifier:   DC:44:DD:BE:99:E6:32:2D:4D:26:72:53:6A:23:1E:E9:A3:C9:59:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584589A318D5925C0EBA0B291B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48e7fe45-ec98-38d5-a1a1-92e1f609f4ae.roa
Signing time:             Sun 14 Apr 2024 01:00:24 +0000
ROA not before:           Sun 14 Apr 2024 01:00:24 +0000
ROA not after:            Sat 13 Jul 2024 01:00:24 +0000
asID:                     33662
IP address blocks:        2001:559:c374::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:a3:18:d5:92:5c:0e:ba:0b:29:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 01:00:24 2024 GMT
            Not After : Jul 13 01:00:24 2024 GMT
        Subject: CN=d0b22ca6-70de-4a4a-a150-dd6b77de6650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:87:b2:98:ac:2a:a8:de:4d:b6:4e:2d:81:
                    a7:e5:02:63:77:fd:83:c3:34:2a:6a:e1:46:19:f4:
                    21:3c:9e:76:71:a3:cf:16:f6:d6:25:25:f5:42:c6:
                    3f:b3:3e:93:a7:f1:5a:f7:25:28:4d:5c:84:4e:e9:
                    40:8c:93:e5:e6:69:3d:f1:05:3a:46:67:8e:8f:d0:
                    b3:0a:fe:fd:41:c1:5a:6e:f4:58:09:7f:fb:58:2d:
                    af:8d:4c:a8:b0:82:b4:ab:ca:fa:5c:56:96:81:d2:
                    76:82:f2:f7:89:86:03:08:72:75:ba:d2:3f:54:d0:
                    0e:9a:33:79:3a:45:60:05:9c:19:47:45:6f:24:e9:
                    68:3b:f7:9c:52:b3:e6:93:80:7e:23:38:75:ca:f5:
                    8a:31:74:69:24:30:58:22:a6:f5:3a:5b:01:87:10:
                    43:52:fd:b5:a4:a1:28:62:8f:a8:2a:34:43:60:82:
                    f2:8a:81:b8:62:fb:dd:33:15:d0:61:07:be:08:a9:
                    0b:c4:01:77:1b:38:bc:25:a6:72:0a:62:98:d4:d7:
                    41:7b:43:72:b6:61:4b:55:06:a5:46:16:be:de:a9:
                    6a:fe:dd:fe:a8:07:8a:84:c6:39:4d:93:21:ab:2c:
                    2c:25:43:23:58:ce:03:f6:b4:3b:ce:a4:8a:ff:61:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:44:DD:BE:99:E6:32:2D:4D:26:72:53:6A:23:1E:E9:A3:C9:59:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48e7fe45-ec98-38d5-a1a1-92e1f609f4ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c374::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:3a:cd:f9:34:d0:08:cb:d4:36:06:40:8f:87:7e:f6:f0:ad:
         73:3c:68:d5:46:4f:a5:49:92:89:bc:88:92:4b:12:9c:ca:4f:
         94:bd:01:03:32:c0:e7:1b:87:e4:e7:72:20:b0:7d:1c:ad:04:
         4a:1c:29:bb:88:79:4d:94:a0:cb:10:f6:57:af:ba:f6:a1:ea:
         80:de:0e:c8:20:98:fe:99:fe:32:7a:54:03:29:86:ed:e2:90:
         da:78:6b:d5:92:87:b4:4b:8c:f7:29:a8:e9:3e:ee:1f:74:b3:
         c3:86:5e:b1:21:af:6c:3e:48:03:5b:b6:c0:27:2d:53:b3:6f:
         2c:2c:6e:2e:e1:72:75:f9:81:ba:28:4c:af:e7:5f:40:bf:4b:
         fa:76:01:17:d1:d1:4f:7b:06:94:3e:16:a5:b7:68:9d:34:ab:
         46:e3:08:25:c3:8a:7a:ba:12:ba:38:d4:3c:9e:da:b3:5e:cd:
         b9:2a:e5:18:51:b8:20:0c:68:1e:64:b7:4c:bb:7c:d7:e6:67:
         07:72:0d:b0:44:b4:0e:3d:a3:15:1c:64:8b:4e:a5:ef:5f:4d:
         f6:d5:66:54:98:7b:b1:4f:63:15:fc:ea:66:19:42:4e:af:88:
         4c:15:a1:a2:28:be:4e:7c:53:46:5a:79:eb:45:46:32:b2:70:
         c8:09:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:16:23 2024 by rpki-client on console-ams.rpki-client.org